This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft File: 4HUznawWU11FeuiGK1NbzlHhIg8.mft (raw, json) Hash identifier: 1/zfMCaXw83ssXllwhgzMpV5paPujsSUdNcUeC8msPw= Subject key identifier: 6B:5A:2C:5D:63:B5:C2:77:69:48:6E:9E:BA:93:62:C1:9D:43:5C:F6 Authority key identifier: E0:75:33:9D:AC:16:53:5D:45:7A:E8:86:2B:53:5B:CE:51:E1:22:0F Certificate issuer: /CN=e075339dac16535d457ae8862b535bce51e1220f Certificate serial: 019B4A026AB634A36EF7543D017BC609CE5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft Manifest number: 05D5 Signing time: Tue 23 Dec 2025 07:00:30 +0000 Manifest this update: Tue 23 Dec 2025 07:00:30 +0000 Manifest next update: Wed 24 Dec 2025 07:00:30 +0000 Files and hashes: 1: 4HUznawWU11FeuiGK1NbzlHhIg8.crl (hash: 2FQe2CYVQoWrpl5JqFGC1tHcXAJ2EDVz3bv/AWz1hLo=) 2: thETdmyhsrSxA59VxLlSHQ0J73Q.roa (hash: KY6/Rka8NKx7O/9lJJyGOxFVIRAxMy7b72Qvukxyq9Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.crl rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:02:6a:b6:34:a3:6e:f7:54:3d:01:7b:c6:09:ce:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e075339dac16535d457ae8862b535bce51e1220f Validity Not Before: Dec 23 07:00:30 2025 GMT Not After : Dec 24 07:00:30 2025 GMT Subject: CN=6b5a2c5d63b5c27769486e9eba9362c19d435cf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e8:28:0d:50:f0:3b:8d:41:17:b1:31:36:66: b3:dd:84:54:92:e8:f1:26:40:4a:50:9d:8f:02:4a: de:c4:0f:41:aa:16:6c:79:08:fc:c8:df:73:df:3e: 2a:48:4c:ea:e7:ff:34:a7:70:f7:e3:e8:93:a8:20: ac:c9:77:1a:6c:d5:42:65:f5:b7:13:52:6d:ad:6d: bd:4e:9c:df:32:40:ed:39:65:e9:8d:75:c3:34:0c: b4:fa:95:88:71:62:6e:3f:df:a8:8b:0a:5c:87:5f: a8:be:e6:0f:c3:cd:bb:bc:16:f9:0b:41:9d:e7:ce: 06:5b:15:14:0c:85:a0:3b:24:11:39:ab:73:22:64: 02:c1:1c:54:a3:96:be:71:fe:2e:0d:4d:ea:4e:f3: 4d:ba:c0:d7:d6:ef:60:30:a9:9b:4a:93:5e:37:d4: 5b:da:fa:c8:9b:a2:5b:01:4b:cc:8b:0f:71:0d:1e: e0:79:d4:0c:df:6d:d4:70:ff:e8:df:74:eb:c9:40: db:29:2d:5a:a5:d4:c3:9f:b3:1b:49:11:d2:32:29: 6a:5b:78:e6:f8:2e:d5:7e:d2:6b:1c:49:6d:d9:33: 74:87:d0:f1:60:48:af:1a:94:3a:0c:26:84:48:7f: 41:6d:2f:83:ff:61:a4:b6:31:4c:47:6b:98:ca:b3: 09:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:5A:2C:5D:63:B5:C2:77:69:48:6E:9E:BA:93:62:C1:9D:43:5C:F6 X509v3 Authority Key Identifier: keyid:E0:75:33:9D:AC:16:53:5D:45:7A:E8:86:2B:53:5B:CE:51:E1:22:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:5a:89:57:9b:b3:0b:fa:60:2e:a2:ce:62:2b:5c:87:02:11: f2:6d:b4:cf:0a:af:4e:d3:94:5c:aa:d0:eb:00:0c:ff:02:29: b3:ff:1f:21:a4:0c:83:06:93:1a:cc:4d:21:5f:68:ba:3c:44: d0:1f:f4:f1:5c:e1:0f:bd:f5:ec:e1:0b:99:89:06:76:05:2a: 95:26:8d:8f:27:d3:78:c1:4f:63:88:1a:c1:ff:51:7f:60:74: bc:dd:a1:e5:3a:a8:17:69:7e:68:6c:ef:6a:cd:14:22:c7:c7: 87:74:16:40:6f:f4:67:05:4f:9b:ac:a5:58:fa:5b:df:d1:a3: b5:dc:cf:d4:39:c4:2c:15:ea:78:a3:86:02:11:db:f8:e1:15: 0f:43:fe:47:ae:8c:2c:bd:5c:42:ee:b0:75:6a:7d:33:02:42: 12:83:3b:7f:a9:4a:3c:be:ad:ac:ba:68:59:34:37:bc:ae:a4: 95:7a:1f:8d:11:cd:e9:c5:dd:ed:69:f8:3a:5e:78:48:9b:48: c7:7f:7d:30:4b:14:f0:ec:7e:42:e2:7a:92:a9:f3:a9:5a:0b: 31:96:77:19:8d:d8:fe:21:57:82:bf:fd:73:b6:fc:25:77:0a: 21:54:49:a0:87:df:a7:85:05:2a:10:0e:0a:1a:f9:a5:5f:d0: 02:fa:20:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKAmq2NKNu91Q9AXvGCc5dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNzUzMzlkYWMxNjUzNWQ0NTdhZTg4NjJiNTM1YmNlNTFl MTIyMGYwHhcNMjUxMjIzMDcwMDMwWhcNMjUxMjI0MDcwMDMwWjAzMTEwLwYDVQQD Eyg2YjVhMmM1ZDYzYjVjMjc3Njk0ODZlOWViYTkzNjJjMTlkNDM1Y2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ugoDVDwO41BF7ExNmaz3YRUkujx JkBKUJ2PAkrexA9BqhZseQj8yN9z3z4qSEzq5/80p3D34+iTqCCsyXcabNVCZfW3 E1JtrW29TpzfMkDtOWXpjXXDNAy0+pWIcWJuP9+oiwpch1+ovuYPw827vBb5C0Gd 584GWxUUDIWgOyQROatzImQCwRxUo5a+cf4uDU3qTvNNusDX1u9gMKmbSpNeN9Rb 2vrIm6JbAUvMiw9xDR7gedQM323UcP/o33TryUDbKS1apdTDn7MbSRHSMilqW3jm +C7VftJrHElt2TN0h9DxYEivGpQ6DCaESH9BbS+D/2GktjFMR2uYyrMJbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGtaLF1jtcJ3aUhunrqTYsGdQ1z2MB8GA1UdIwQY MBaAFOB1M52sFlNdRXrohitTW85R4SIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEhVem5hd1dVMTFGZXVpR0sxTmJ6bEhoSWc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zM2Q2MzktNDljMi00MzAxLWI2YzMt YmI2YzZjNDU3ODE3LzEvNEhVem5hd1dVMTFGZXVpR0sxTmJ6bEhoSWc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8zM2Q2MzktNDljMi00MzAxLWI2YzMtYmI2YzZjNDU3ODE3 LzEvNEhVem5hd1dVMTFGZXVpR0sxTmJ6bEhoSWc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdVqJV5uz C/pgLqLOYitchwIR8m20zwqvTtOUXKrQ6wAM/wIps/8fIaQMgwaTGsxNIV9oujxE 0B/08VzhD7317OELmYkGdgUqlSaNjyfTeMFPY4gawf9Rf2B0vN2h5TqoF2l+aGzv as0UIsfHh3QWQG/0ZwVPm6ylWPpb39GjtdzP1DnELBXqeKOGAhHb+OEVD0P+R66M LL1cQu6wdWp9MwJCEoM7f6lKPL6trLpoWTQ3vK6klXofjRHN6cXd7Wn4Ol54SJtI x399MEsU8Ox+QuJ6kqnzqVoLMZZ3GY3Y/iFXgr/9c7b8JXcKIVRJoIffp4UFKhAO Chr5pV/QAvogEQ== -----END CERTIFICATE-----Generated at Tue Dec 23 16:42:55 2025 by rpki-client